NetTCPIP.dll
- File Path:
C:\Windows\system32\wbem\NetTCPIP.dll
- Description: TCPIP WMI Provider
Hashes
Type |
Hash |
MD5 |
4DEA9BBEA6DA752753F7CE74D45D956A |
SHA1 |
1C3130191F3C971C67B9F705AAD22935F74C615B |
SHA256 |
CBE2937489D7F202CF933D92ECBFF77E77EF0E4C2B0F628EF9F5764BD6728010 |
SHA384 |
F99631D5F98DD1686D966DD85386F64BB22AD9CB1095B44F357362936E4CC01E1B344BEBB96C8DDC34D1664236D74D46 |
SHA512 |
44CCAE5F39EA72C8DBC81CA7DF3E0540148285178812237CD98A223E514C98DFC9E79065CEB94CC14628B5A54B2CCC57F3FA4FE2202A258FE7492C4384AA22B1 |
SSDEEP |
6144:4OBNthkt4cT3HyfmS+qP6NF2gO+viM5aJVb5zzgpKb:4si4ySmSL/gliMUJVbp4K |
IMP |
B5A240C8D51B0E74A618816D05E3E2B4 |
PESHA1 |
7794A4F5D211100351CD8498833A417EA1473F36 |
PE256 |
F2903BC7E9618E41FC2D327A706EEC086F352BEACFF23F5372E7E1D5ED9D06F6 |
DLL Exports:
Function Name |
Ordinal |
Type |
DllUnregisterServer |
5 |
Exported Function |
GetProviderClassID |
6 |
Exported Function |
MI_Main |
7 |
Exported Function |
DllRegisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
DllMain |
3 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: NetTCPIP.dll.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/cbe2937489d7f202cf933d92ecbff77e77ef0e4c2b0f628ef9f5764bd6728010/detection/
MIT License. Copyright (c) 2020-2021 Strontic.